1. Data Controller Identity & Scope
This privacy policy outlines the practices of Matsyclipticker Risk Research Ltd ("we", "our", or "the Company"), operating the domain matsyclipticker.garden. We act as data controller in respect of personal data gathered via our web infrastructure, technical communication channels, and direct inquiry submissions.
The registered office of the Company is situated at 14 Mercer Crossway, Holborn, London, WC2B 5PA, United Kingdom. Any regulatory questions or inquiries regarding our information practices should be directed to our designated privacy officer via [email protected].
2. Categories of Information Collected
We restrict data collection to information essential for technical service delivery, security verification, and administrative communications:
- Direct Inquiry Data: Names, institutional email addresses, affiliated corporate or academic bodies, and technical consultation briefs submitted through our inquiry forms.
- Technical Telemetry: Anonymized server access logs, comprising truncated Internet Protocol (IP) addresses, browser user agent strings, HTTP referrers, request timestamps, and response status codes.
- Session Configuration Data: Essential local storage tokens used exclusively to record user cookie preference selections.
3. Lawful Bases for Processing
All processing of personal data is conducted strictly under recognized legal justifications as defined within Article 6 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:
- Legitimate Interests: Processing server request telemetry to maintain network integrity, prevent denial-of-service intrusions, and ensure server stability.
- Contractual Preparation: Processing institutional contact details to prepare technical evaluation proposals, mutual non-disclosure agreements, and consulting scopes of work.
- Legal Compliance: Retaining financial and administrative transaction records where mandated by United Kingdom corporate and taxation statutory codes.
4. Processors and Third-Party Disclosures
We do not sell, rent, monetize, or disclose user data to commercial advertising brokers. Infrastructure processing is limited to certified hosting providers maintaining ISO/IEC 27001 compliance within the United Kingdom and European Economic Area (EEA).
Where cross-border transfers occur, they proceed solely under UK International Data Transfer Agreements (IDTAs) or European Commission Standard Contractual Clauses (SCCs) guaranteeing equivalent safeguards.
5. International Statutory Rights (UK GDPR, EU GDPR, CCPA)
Depending on your geographic location, data subjects possess statutory rights regarding personal data held by us:
- Right of Access: You may request confirmation of whether personal data concerning you is processed, alongside a copy of that data.
- Right to Rectification: You may demand immediate correction of inaccurate or incomplete personal records.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of personal data when retention is no longer necessary for the original collection purpose.
- Right to Restriction and Objection: You may restrict processing or object to processing carried out under legitimate interest justifications.
- California Consumer Privacy Act (CCPA) Disclosures: California residents hold the right to know what personal categories are collected, request deletion without discrimination, and confirm that we do not engage in the sale or cross-context behavioral sharing of personal data.
6. Data Retention and Destruction Protocols
Inquiry communications that do not progress to an active consulting engagement are purged from our live intake systems after twenty-four (24) months. Server log files are truncated and rotated on a thirty-day cycle, after which aggregated metrics are stripped of individual IP references. Retained business ledgers under formal consulting contracts are preserved for seven (7) years in compliance with statutory audit standards.
7. Supervisory Authority Contact
Data subjects within the United Kingdom possess the right to submit a complaint to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF; ico.org.uk).